Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
File: bBt3vE7dikuDdEdqc0dxm2drdV4.mft (raw, json)
Hash identifier: H/HwJuTQiZsPHzyq7ziRZ/ZxUxgYTOgFWz1m9lI2qoA=
Subject key identifier: 96:4B:A2:EF:9D:FC:70:DF:8B:32:11:AF:83:BE:4E:A1:0D:72:B6:4C
Authority key identifier: 6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E
Certificate issuer: /CN=6c1b77bc4edd8a4b8374476a7347719b676b755e
Certificate serial: 019A72CA2F61BE36D489EAD0D019CB1E5AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
Manifest number: 08B5
Signing time: Tue 11 Nov 2025 12:00:44 +0000
Manifest this update: Tue 11 Nov 2025 12:00:44 +0000
Manifest next update: Wed 12 Nov 2025 12:00:44 +0000
Files and hashes: 1: O2px1aU6bIAARpFepBVuBuziiJg.roa (hash: YWn9Xv+EiDSxX317xosj76y38TuR6qoVCsWMWeoaRA8=)
2: bBt3vE7dikuDdEdqc0dxm2drdV4.crl (hash: tUOMVgTctHLPFfER+Yngqw5/y0Pwe8EWMOmofuRVWWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:2f:61:be:36:d4:89:ea:d0:d0:19:cb:1e:5a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1b77bc4edd8a4b8374476a7347719b676b755e
Validity
Not Before: Nov 11 12:00:44 2025 GMT
Not After : Nov 12 12:00:44 2025 GMT
Subject: CN=964ba2ef9dfc70df8b3211af83be4ea10d72b64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:78:23:82:9f:c6:f2:da:6f:0a:b6:cd:91:
00:62:62:d5:33:c0:49:1a:ef:2a:62:a8:ff:fa:d1:
f8:73:29:48:ac:d0:71:65:53:42:27:f2:09:31:61:
f8:13:7d:4d:ca:00:62:b7:73:7a:50:f0:39:20:31:
b5:54:30:21:a0:b5:7c:bd:2f:4e:f9:e6:7f:37:cd:
66:d8:7e:3b:f4:1c:dd:fe:71:4f:75:43:84:e5:1c:
b2:c4:af:60:a3:e2:ef:6f:ba:24:b6:10:19:0d:b4:
f1:db:ba:37:bb:81:73:9f:54:ac:44:7f:98:d5:ba:
f0:03:b9:6a:65:f0:f4:3c:0a:eb:71:b8:16:78:b1:
24:14:3a:c2:e4:4c:62:5d:50:41:0e:a6:17:c7:be:
66:2b:8f:ad:6e:c1:14:98:49:f0:a8:af:d9:44:c8:
6a:a1:69:2d:74:48:58:2b:d1:84:58:f2:b1:ab:37:
d3:28:38:9e:07:6f:1a:a2:28:e9:a1:89:85:8d:2a:
94:31:07:0c:a5:d6:f8:ed:48:bd:0a:38:58:36:c6:
a3:de:02:07:31:ac:fe:e8:5c:b6:28:f2:ba:4d:a8:
e0:a6:be:c9:8e:e8:ef:11:92:ed:d5:33:36:e8:60:
3b:bb:35:6b:9a:fd:10:84:d1:5e:c9:82:5b:0a:22:
27:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4B:A2:EF:9D:FC:70:DF:8B:32:11:AF:83:BE:4E:A1:0D:72:B6:4C
X509v3 Authority Key Identifier:
keyid:6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:7d:ea:18:4e:6c:cf:a9:ca:08:ff:c1:3a:55:4b:ca:f3:73:
5d:7f:70:e7:4b:82:f4:b5:ef:94:f8:c4:78:97:e2:5d:8a:5e:
b8:5c:96:16:6a:17:93:c9:40:fc:fc:ad:33:77:4d:30:b2:9e:
1c:ac:49:5e:39:ea:f0:0b:dd:fa:1c:72:af:de:52:53:97:92:
48:53:20:22:ee:c9:f5:5a:2b:64:10:d8:39:b1:4a:77:fa:10:
55:4a:62:60:72:d6:12:dc:d5:44:37:a7:8f:14:a4:e6:d1:d8:
49:2d:57:03:6e:61:ed:61:0c:a5:33:f2:69:4e:37:b9:67:41:
3b:68:f5:6b:1d:22:e2:24:cf:da:58:0d:75:84:f0:04:2a:fa:
e1:1a:4c:64:bc:dc:b0:c5:95:7c:0a:ce:0f:93:82:d5:32:69:
c4:2c:ce:72:8d:84:58:65:b5:88:6d:0f:3b:2a:61:8f:64:c4:
4f:a0:94:fd:58:01:6b:5d:2d:55:a4:85:ff:3b:4b:2e:71:f5:
16:98:4e:f4:f2:79:39:d4:33:2b:81:9c:16:e6:4e:44:2f:11:
51:ff:33:dc:71:27:64:be:46:a7:de:a9:9d:70:ca:e0:cd:6b:
5c:5c:6c:d5:cd:b9:eb:0d:7b:52:fc:48:2e:e2:53:0c:87:32:
e3:1c:89:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:42:12 2025 by rpki-client